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ABSTRACT OF THE DISCLOSURE 
User interaction with a secure resource is controlled or mediated by the 
security server that includes a telephony interface by which the server is either 
coupled to the telephone system or provides messages to the telephone system 
directly or through an intermediate component. A biometric data store stores 
biometric data, such as speech data or visual recognition data. If desired the 
biometric data may also be stored in association with the extension identifiers of 
the telephone system. A biometric verification/. identification system accesses this 
data store and evaluates provided user biometric data vis-a-vis the stored 
biometric data to determine if the user may control or interact with the secure 
resource. If interaction is permitted, the security server sends control signals to 
the secure resource. The telephone system provides an interface through which 
the user trains the system to store the biometric verification/.identification data of 
that user. 
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